RE: MSDE contained in...

From: Mark E. Donaldson <markee(at)ridgecrest.ca.us>
Date: Tue Jan 28 2003 - 21:25:17 EST

MSDE "comes available" and "optional" with all these programs. However, in most cases it is not part of the normal install, and must be installed separately and explicitly. Heck, I've got Visio too, and Visual Studio .NET installed on my primary machine. But I do not have MSDE installed.

-----Original Message-----

From: Tina Bird [mailto:tbird@precision-guesswork.com] Sent: Monday, January 27, 2003 8:12 PM
To: incidents@securityfocus.com; intrusions@incidents.org; Ced Bennett; tmd@Stanford.edu; David Hoffman; eric.nakagawa@Stanford.edu; mnewton@Stanford.edu; tsg@shmoo.com; tbird65@Stanford.edu; list-ni@counterpane.com
Subject: MSDE contained in...

Chalk this all up to "things I wish I didn't know": I've been amused and skeptical at the list of applications people have claimed include MSDE, that are therefore vulnerable to SQL Slammer. In particular, I had a hard time believing that Visio used it. Heck, I've got Visio, and I'm pretty sure it doesn't open any network connections.

So I prowled around the Web, and found this: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn ol/visio/Visio2002/maintain/vis_msde.asp

MSDE is integrated with these Microsoft applications:

Microsoft Visio 2000 Enterprise Edition AutoDiscovery & Layout (AD&L) solution
AD&L solution from Microsoft Visio Enterprise Network Tools 2002 Microsoft SharePoint Team Services (a Microsoft FrontPage Server Extensions 2002 companion product)
Microsoft Project Central (a Microsoft Project 2000 companion product) Microsoft Application Center

The following products ship MSDE on their product CD and can use MSDE as a database:

Microsoft Access
Microsoft Office 2000
Microsoft Visual Studio 6.0

--> Bleh. I stand corrected.

tbird

--

I, on the other hand, do not work. I enjoy the slothful life of an artist, and while away the hours in meaningless aesthetic pursuits punctuated by bouts of hedonistic debauchery and an occasional nap.

• David Rinehart

http://www.shmoo.com/~tbird
Log Analysis http://www.loganalysis.org
VPN http://vpn.shmoo.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Jan 29 11:14:10 2003